Oval Definition:	oval:org.mitre.oval:def:5563
Revision Date: 2014-08-18 Version: 48 Title: Data Stream Handling Memory Corruption Vulnerability Description: Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 through SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream that triggers memory corruption, as demonstrated using an invalid MIME-type that does not have a registered handler. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2008-1085 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft Internet Explorer Definition Synopsis Internet Explorer 5.01 on Windows 2000 Microsoft Windows 2000 is installed AND Microsoft Internet Explorer 5.01 SP4 is installed AND Mshtml.dll version is less than 5.0.3862.1500 OR Internet Explorer 6 on Windows 2000 Microsoft Windows 2000 is installed AND Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.2800.1609 OR Internet Explorer 6 on Windows XP x86 Microsoft Windows XP (32-bit) is installed AND Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.2900.3314 OR Intrenet Explorer 6 on Windows XP x64, Server 2003 x86/ia64, Server 2003 x64 Win XP X64 / Win 2K3 Microsoft Windows XP x64 is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed OR Microsoft Windows Server 2003 (x64) is installed AND Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.3790.3091 OR Internet Explorer 7 on Windows xp x86/x64, Server 2003 x86/x64/ia64, Server 2003 x86/x64/ia64 Win XP / Win 2K3 Microsoft Windows XP (32-bit) is installed OR Microsoft Windows XP x64 is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed AND Microsoft Internet Explorer 7 is installed AND GDR or QFE Service branch Mshtml.dll version is less than 7.0.6000.16640 OR QFE Mshtml.dll version is greater than 7.0.6000.20000 AND Mshtml.dll version is less than 7.0.6000.20772 OR Internet Explorer 7 on Windows Vista x86/x64, Server 2008 x86/x64/ia64 Win Vista 32/ 64 Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed AND Microsoft Internet Explorer 7 is installed AND GDR or QFE Service branch Mshtml.dll version is less than 7.0.6000.16643 OR QFE Mshtml.dll version is less than 7.0.6000.20777 AND Mshtml.dll version is greater than 7.0.6000.20000 OR Internet Explorer 7 on Windows Vista x86/x64, Server 2008 x86/x64/ia64 Win Vista / 2K8 Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed AND Microsoft Internet Explorer 7 is installed AND GDR or QFE Service branch Mshtml.dll version is less than 7.0.6001.18023 OR QFE Mshtml.dll version is less than 7.0.6001.22120 AND Mshtml.dll version is greater than or equal to 7.0.6001.22000 OR IE 6 on Win XP X64 / Win 2K3 Win XP X64 or Win 2K3 Microsoft Windows XP x64 is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed AND Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.3790.4237
BACK